aws-sdk-ssoadmin 1.17.0 → 1.20.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +15 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-ssoadmin/client.rb +238 -225
- data/lib/aws-sdk-ssoadmin/types.rb +251 -260
- data/lib/aws-sdk-ssoadmin.rb +1 -1
- metadata +2 -2
@@ -10,13 +10,13 @@
|
|
10
10
|
module Aws::SSOAdmin
|
11
11
|
module Types
|
12
12
|
|
13
|
-
# These are
|
14
|
-
#
|
15
|
-
#
|
16
|
-
#
|
17
|
-
#
|
18
|
-
#
|
19
|
-
#
|
13
|
+
# These are IAM Identity Center identity store attributes that you can
|
14
|
+
# configure for use in attributes-based access control (ABAC). You can
|
15
|
+
# create permissions policies that determine who can access your AWS
|
16
|
+
# resources based upon the configured attribute values. When you enable
|
17
|
+
# ABAC and specify `AccessControlAttributes`, IAM Identity Center passes
|
18
|
+
# the attribute values of the authenticated user into IAM for use in
|
19
|
+
# policy evaluation.
|
20
20
|
#
|
21
21
|
# @note When making an API call, you may pass AccessControlAttribute
|
22
22
|
# data as a hash:
|
@@ -31,7 +31,7 @@ module Aws::SSOAdmin
|
|
31
31
|
# @!attribute [rw] key
|
32
32
|
# The name of the attribute associated with your identities in your
|
33
33
|
# identity source. This is used to map a specified attribute in your
|
34
|
-
# identity source with an attribute in
|
34
|
+
# identity source with an attribute in IAM Identity Center.
|
35
35
|
# @return [String]
|
36
36
|
#
|
37
37
|
# @!attribute [rw] value
|
@@ -49,8 +49,8 @@ module Aws::SSOAdmin
|
|
49
49
|
end
|
50
50
|
|
51
51
|
# The value used for mapping a specified attribute to an identity
|
52
|
-
# source. For more information, see [Attribute mappings][1] in the
|
53
|
-
#
|
52
|
+
# source. For more information, see [Attribute mappings][1] in the *IAM
|
53
|
+
# Identity Center User Guide*.
|
54
54
|
#
|
55
55
|
#
|
56
56
|
#
|
@@ -64,8 +64,8 @@ module Aws::SSOAdmin
|
|
64
64
|
# }
|
65
65
|
#
|
66
66
|
# @!attribute [rw] source
|
67
|
-
# The identity source to use when mapping a specified attribute to
|
68
|
-
#
|
67
|
+
# The identity source to use when mapping a specified attribute to IAM
|
68
|
+
# Identity Center.
|
69
69
|
# @return [Array<String>]
|
70
70
|
#
|
71
71
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AccessControlAttributeValue AWS API Documentation
|
@@ -90,22 +90,22 @@ module Aws::SSOAdmin
|
|
90
90
|
end
|
91
91
|
|
92
92
|
# The assignment that indicates a principal's limited access to a
|
93
|
-
# specified
|
93
|
+
# specified AWS account with a specified permission set.
|
94
94
|
#
|
95
95
|
# <note markdown="1"> The term *principal* here refers to a user or group that is defined in
|
96
|
-
#
|
96
|
+
# IAM Identity Center.
|
97
97
|
#
|
98
98
|
# </note>
|
99
99
|
#
|
100
100
|
# @!attribute [rw] account_id
|
101
|
-
# The identifier of the
|
101
|
+
# The identifier of the AWS account.
|
102
102
|
# @return [String]
|
103
103
|
#
|
104
104
|
# @!attribute [rw] permission_set_arn
|
105
105
|
# The ARN of the permission set. For more information about ARNs, see
|
106
|
-
# [Amazon Resource Names (ARNs) and
|
106
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
107
107
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
108
|
-
# *
|
108
|
+
# *AWS General Reference*.
|
109
109
|
# @return [String]
|
110
110
|
#
|
111
111
|
# @!attribute [rw] principal_type
|
@@ -113,11 +113,11 @@ module Aws::SSOAdmin
|
|
113
113
|
# @return [String]
|
114
114
|
#
|
115
115
|
# @!attribute [rw] principal_id
|
116
|
-
# An identifier for an object in
|
117
|
-
#
|
116
|
+
# An identifier for an object in IAM Identity Center, such as a user
|
117
|
+
# or group. PrincipalIds are GUIDs (For example,
|
118
118
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
119
|
-
# PrincipalIds in
|
120
|
-
#
|
119
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
120
|
+
# Identity Store API
|
121
121
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
122
122
|
# @return [String]
|
123
123
|
#
|
@@ -150,8 +150,8 @@ module Aws::SSOAdmin
|
|
150
150
|
# @return [String]
|
151
151
|
#
|
152
152
|
# @!attribute [rw] target_id
|
153
|
-
# TargetID is an
|
154
|
-
#
|
153
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit
|
154
|
+
# string (For example, 123456789012).
|
155
155
|
# @return [String]
|
156
156
|
#
|
157
157
|
# @!attribute [rw] target_type
|
@@ -160,9 +160,9 @@ module Aws::SSOAdmin
|
|
160
160
|
#
|
161
161
|
# @!attribute [rw] permission_set_arn
|
162
162
|
# The ARN of the permission set. For more information about ARNs, see
|
163
|
-
# [Amazon Resource Names (ARNs) and
|
163
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
164
164
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
165
|
-
# *
|
165
|
+
# *AWS General Reference*.
|
166
166
|
# @return [String]
|
167
167
|
#
|
168
168
|
# @!attribute [rw] principal_type
|
@@ -170,11 +170,11 @@ module Aws::SSOAdmin
|
|
170
170
|
# @return [String]
|
171
171
|
#
|
172
172
|
# @!attribute [rw] principal_id
|
173
|
-
# An identifier for an object in
|
174
|
-
#
|
173
|
+
# An identifier for an object in IAM Identity Center, such as a user
|
174
|
+
# or group. PrincipalIds are GUIDs (For example,
|
175
175
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
176
|
-
# PrincipalIds in
|
177
|
-
#
|
176
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
177
|
+
# Identity Store API
|
178
178
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
179
179
|
# @return [String]
|
180
180
|
#
|
@@ -236,8 +236,8 @@ module Aws::SSOAdmin
|
|
236
236
|
# }
|
237
237
|
#
|
238
238
|
# @!attribute [rw] instance_arn
|
239
|
-
# The ARN of the
|
240
|
-
# executed.
|
239
|
+
# The ARN of the IAM Identity Center instance under which the
|
240
|
+
# operation will be executed.
|
241
241
|
# @return [String]
|
242
242
|
#
|
243
243
|
# @!attribute [rw] permission_set_arn
|
@@ -245,10 +245,9 @@ module Aws::SSOAdmin
|
|
245
245
|
# @return [String]
|
246
246
|
#
|
247
247
|
# @!attribute [rw] customer_managed_policy_reference
|
248
|
-
# Specifies the name and path of
|
249
|
-
#
|
250
|
-
#
|
251
|
-
# set.
|
248
|
+
# Specifies the name and path of a customer managed policy. You must
|
249
|
+
# have an IAM policy that matches the name and path in each AWS
|
250
|
+
# account where you want to deploy your permission set.
|
252
251
|
# @return [Types::CustomerManagedPolicyReference]
|
253
252
|
#
|
254
253
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachCustomerManagedPolicyReferenceToPermissionSetRequest AWS API Documentation
|
@@ -275,11 +274,11 @@ module Aws::SSOAdmin
|
|
275
274
|
# }
|
276
275
|
#
|
277
276
|
# @!attribute [rw] instance_arn
|
278
|
-
# The ARN of the
|
279
|
-
# executed. For more information about ARNs, see
|
280
|
-
# Names (ARNs) and
|
277
|
+
# The ARN of the IAM Identity Center instance under which the
|
278
|
+
# operation will be executed. For more information about ARNs, see
|
279
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
281
280
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
282
|
-
# *
|
281
|
+
# *AWS General Reference*.
|
283
282
|
# @return [String]
|
284
283
|
#
|
285
284
|
# @!attribute [rw] permission_set_arn
|
@@ -288,8 +287,7 @@ module Aws::SSOAdmin
|
|
288
287
|
# @return [String]
|
289
288
|
#
|
290
289
|
# @!attribute [rw] managed_policy_arn
|
291
|
-
# The
|
292
|
-
# permission set.
|
290
|
+
# The AWS managed policy ARN to be attached to a permission set.
|
293
291
|
# @return [String]
|
294
292
|
#
|
295
293
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachManagedPolicyToPermissionSetRequest AWS API Documentation
|
@@ -306,19 +304,17 @@ module Aws::SSOAdmin
|
|
306
304
|
#
|
307
305
|
class AttachManagedPolicyToPermissionSetResponse < Aws::EmptyStructure; end
|
308
306
|
|
309
|
-
# A structure that stores the details of the
|
310
|
-
# IAM policy.
|
307
|
+
# A structure that stores the details of the AWS managed policy.
|
311
308
|
#
|
312
309
|
# @!attribute [rw] name
|
313
|
-
# The name of the
|
310
|
+
# The name of the AWS managed policy.
|
314
311
|
# @return [String]
|
315
312
|
#
|
316
313
|
# @!attribute [rw] arn
|
317
|
-
# The ARN of the
|
318
|
-
#
|
319
|
-
# Web Services Service
|
314
|
+
# The ARN of the AWS managed policy. For more information about ARNs,
|
315
|
+
# see [Amazon Resource Names (ARNs) and AWS Service
|
320
316
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
321
|
-
# *
|
317
|
+
# *AWS General Reference*.
|
322
318
|
# @return [String]
|
323
319
|
#
|
324
320
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachedManagedPolicy AWS API Documentation
|
@@ -360,16 +356,16 @@ module Aws::SSOAdmin
|
|
360
356
|
# }
|
361
357
|
#
|
362
358
|
# @!attribute [rw] instance_arn
|
363
|
-
# The ARN of the
|
364
|
-
# executed. For more information about ARNs, see
|
365
|
-
# Names (ARNs) and
|
359
|
+
# The ARN of the IAM Identity Center instance under which the
|
360
|
+
# operation will be executed. For more information about ARNs, see
|
361
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
366
362
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
367
|
-
# *
|
363
|
+
# *AWS General Reference*.
|
368
364
|
# @return [String]
|
369
365
|
#
|
370
366
|
# @!attribute [rw] target_id
|
371
|
-
# TargetID is an
|
372
|
-
#
|
367
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit
|
368
|
+
# string (For example, 123456789012).
|
373
369
|
# @return [String]
|
374
370
|
#
|
375
371
|
# @!attribute [rw] target_type
|
@@ -386,11 +382,11 @@ module Aws::SSOAdmin
|
|
386
382
|
# @return [String]
|
387
383
|
#
|
388
384
|
# @!attribute [rw] principal_id
|
389
|
-
# An identifier for an object in
|
390
|
-
#
|
385
|
+
# An identifier for an object in IAM Identity Center, such as a user
|
386
|
+
# or group. PrincipalIds are GUIDs (For example,
|
391
387
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
392
|
-
# PrincipalIds in
|
393
|
-
#
|
388
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
389
|
+
# Identity Store API
|
394
390
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
395
391
|
# @return [String]
|
396
392
|
#
|
@@ -437,19 +433,19 @@ module Aws::SSOAdmin
|
|
437
433
|
# }
|
438
434
|
#
|
439
435
|
# @!attribute [rw] instance_arn
|
440
|
-
# The ARN of the
|
441
|
-
# executed.
|
436
|
+
# The ARN of the IAM Identity Center instance under which the
|
437
|
+
# operation will be executed.
|
442
438
|
# @return [String]
|
443
439
|
#
|
444
440
|
# @!attribute [rw] instance_access_control_attribute_configuration
|
445
|
-
# Specifies the
|
446
|
-
#
|
447
|
-
#
|
448
|
-
#
|
449
|
-
# attributes from the
|
450
|
-
#
|
451
|
-
#
|
452
|
-
#
|
441
|
+
# Specifies the IAM Identity Center identity store attributes to add
|
442
|
+
# to your ABAC configuration. When using an external identity provider
|
443
|
+
# as an identity source, you can pass attributes through the SAML
|
444
|
+
# assertion. Doing so provides an alternative to configuring
|
445
|
+
# attributes from the IAM Identity Center identity store. If a SAML
|
446
|
+
# assertion passes any of these attributes, IAM Identity Center will
|
447
|
+
# replace the attribute value with the value from the IAM Identity
|
448
|
+
# Center identity store.
|
453
449
|
# @return [Types::InstanceAccessControlAttributeConfiguration]
|
454
450
|
#
|
455
451
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/CreateInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
|
@@ -491,11 +487,11 @@ module Aws::SSOAdmin
|
|
491
487
|
# @return [String]
|
492
488
|
#
|
493
489
|
# @!attribute [rw] instance_arn
|
494
|
-
# The ARN of the
|
495
|
-
# executed. For more information about ARNs, see
|
496
|
-
# Names (ARNs) and
|
490
|
+
# The ARN of the IAM Identity Center instance under which the
|
491
|
+
# operation will be executed. For more information about ARNs, see
|
492
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
497
493
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
498
|
-
# *
|
494
|
+
# *AWS General Reference*.
|
499
495
|
# @return [String]
|
500
496
|
#
|
501
497
|
# @!attribute [rw] session_duration
|
@@ -526,7 +522,7 @@ module Aws::SSOAdmin
|
|
526
522
|
end
|
527
523
|
|
528
524
|
# @!attribute [rw] permission_set
|
529
|
-
# Defines the level of access on an
|
525
|
+
# Defines the level of access on an AWS account.
|
530
526
|
# @return [Types::PermissionSet]
|
531
527
|
#
|
532
528
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/CreatePermissionSetResponse AWS API Documentation
|
@@ -537,9 +533,9 @@ module Aws::SSOAdmin
|
|
537
533
|
include Aws::Structure
|
538
534
|
end
|
539
535
|
|
540
|
-
# Specifies the name and path of
|
541
|
-
#
|
542
|
-
#
|
536
|
+
# Specifies the name and path of a customer managed policy. You must
|
537
|
+
# have an IAM policy that matches the name and path in each AWS account
|
538
|
+
# where you want to deploy your permission set.
|
543
539
|
#
|
544
540
|
# @note When making an API call, you may pass CustomerManagedPolicyReference
|
545
541
|
# data as a hash:
|
@@ -550,13 +546,15 @@ module Aws::SSOAdmin
|
|
550
546
|
# }
|
551
547
|
#
|
552
548
|
# @!attribute [rw] name
|
553
|
-
# The name of the policy
|
549
|
+
# The name of the IAM policy that you have configured in each account
|
550
|
+
# where you want to deploy your permission set.
|
554
551
|
# @return [String]
|
555
552
|
#
|
556
553
|
# @!attribute [rw] path
|
557
|
-
# The path
|
558
|
-
#
|
559
|
-
#
|
554
|
+
# The path to the IAM policy that you have configured in each account
|
555
|
+
# where you want to deploy your permission set. The default is `/`.
|
556
|
+
# For more information, see [Friendly names and paths][1] in the *IAM
|
557
|
+
# User Guide*.
|
560
558
|
#
|
561
559
|
#
|
562
560
|
#
|
@@ -585,16 +583,16 @@ module Aws::SSOAdmin
|
|
585
583
|
# }
|
586
584
|
#
|
587
585
|
# @!attribute [rw] instance_arn
|
588
|
-
# The ARN of the
|
589
|
-
# executed. For more information about ARNs, see
|
590
|
-
# Names (ARNs) and
|
586
|
+
# The ARN of the IAM Identity Center instance under which the
|
587
|
+
# operation will be executed. For more information about ARNs, see
|
588
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
591
589
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
592
|
-
# *
|
590
|
+
# *AWS General Reference*.
|
593
591
|
# @return [String]
|
594
592
|
#
|
595
593
|
# @!attribute [rw] target_id
|
596
|
-
# TargetID is an
|
597
|
-
#
|
594
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit
|
595
|
+
# string (For example, 123456789012).
|
598
596
|
# @return [String]
|
599
597
|
#
|
600
598
|
# @!attribute [rw] target_type
|
@@ -610,11 +608,11 @@ module Aws::SSOAdmin
|
|
610
608
|
# @return [String]
|
611
609
|
#
|
612
610
|
# @!attribute [rw] principal_id
|
613
|
-
# An identifier for an object in
|
614
|
-
#
|
611
|
+
# An identifier for an object in IAM Identity Center, such as a user
|
612
|
+
# or group. PrincipalIds are GUIDs (For example,
|
615
613
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
616
|
-
# PrincipalIds in
|
617
|
-
#
|
614
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
615
|
+
# Identity Store API
|
618
616
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
619
617
|
# @return [String]
|
620
618
|
#
|
@@ -652,11 +650,11 @@ module Aws::SSOAdmin
|
|
652
650
|
# }
|
653
651
|
#
|
654
652
|
# @!attribute [rw] instance_arn
|
655
|
-
# The ARN of the
|
656
|
-
# executed. For more information about ARNs, see
|
657
|
-
# Names (ARNs) and
|
653
|
+
# The ARN of the IAM Identity Center instance under which the
|
654
|
+
# operation will be executed. For more information about ARNs, see
|
655
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
658
656
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
659
|
-
# *
|
657
|
+
# *AWS General Reference*.
|
660
658
|
# @return [String]
|
661
659
|
#
|
662
660
|
# @!attribute [rw] permission_set_arn
|
@@ -684,8 +682,8 @@ module Aws::SSOAdmin
|
|
684
682
|
# }
|
685
683
|
#
|
686
684
|
# @!attribute [rw] instance_arn
|
687
|
-
# The ARN of the
|
688
|
-
# executed.
|
685
|
+
# The ARN of the IAM Identity Center instance under which the
|
686
|
+
# operation will be executed.
|
689
687
|
# @return [String]
|
690
688
|
#
|
691
689
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DeleteInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
|
@@ -709,11 +707,11 @@ module Aws::SSOAdmin
|
|
709
707
|
# }
|
710
708
|
#
|
711
709
|
# @!attribute [rw] instance_arn
|
712
|
-
# The ARN of the
|
713
|
-
# executed. For more information about ARNs, see
|
714
|
-
# Names (ARNs) and
|
710
|
+
# The ARN of the IAM Identity Center instance under which the
|
711
|
+
# operation will be executed. For more information about ARNs, see
|
712
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
715
713
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
716
|
-
# *
|
714
|
+
# *AWS General Reference*.
|
717
715
|
# @return [String]
|
718
716
|
#
|
719
717
|
# @!attribute [rw] permission_set_arn
|
@@ -742,8 +740,8 @@ module Aws::SSOAdmin
|
|
742
740
|
# }
|
743
741
|
#
|
744
742
|
# @!attribute [rw] instance_arn
|
745
|
-
# The ARN of the
|
746
|
-
# executed.
|
743
|
+
# The ARN of the IAM Identity Center instance under which the
|
744
|
+
# operation will be executed.
|
747
745
|
# @return [String]
|
748
746
|
#
|
749
747
|
# @!attribute [rw] permission_set_arn
|
@@ -772,11 +770,11 @@ module Aws::SSOAdmin
|
|
772
770
|
# }
|
773
771
|
#
|
774
772
|
# @!attribute [rw] instance_arn
|
775
|
-
# The ARN of the
|
776
|
-
# executed. For more information about ARNs, see
|
777
|
-
# Names (ARNs) and
|
773
|
+
# The ARN of the IAM Identity Center instance under which the
|
774
|
+
# operation will be executed. For more information about ARNs, see
|
775
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
778
776
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
779
|
-
# *
|
777
|
+
# *AWS General Reference*.
|
780
778
|
# @return [String]
|
781
779
|
#
|
782
780
|
# @!attribute [rw] account_assignment_creation_request_id
|
@@ -813,11 +811,11 @@ module Aws::SSOAdmin
|
|
813
811
|
# }
|
814
812
|
#
|
815
813
|
# @!attribute [rw] instance_arn
|
816
|
-
# The ARN of the
|
817
|
-
# executed. For more information about ARNs, see
|
818
|
-
# Names (ARNs) and
|
814
|
+
# The ARN of the IAM Identity Center instance under which the
|
815
|
+
# operation will be executed. For more information about ARNs, see
|
816
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
819
817
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
820
|
-
# *
|
818
|
+
# *AWS General Reference*.
|
821
819
|
# @return [String]
|
822
820
|
#
|
823
821
|
# @!attribute [rw] account_assignment_deletion_request_id
|
@@ -853,8 +851,8 @@ module Aws::SSOAdmin
|
|
853
851
|
# }
|
854
852
|
#
|
855
853
|
# @!attribute [rw] instance_arn
|
856
|
-
# The ARN of the
|
857
|
-
# executed.
|
854
|
+
# The ARN of the IAM Identity Center instance under which the
|
855
|
+
# operation will be executed.
|
858
856
|
# @return [String]
|
859
857
|
#
|
860
858
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
|
@@ -875,8 +873,8 @@ module Aws::SSOAdmin
|
|
875
873
|
# @return [String]
|
876
874
|
#
|
877
875
|
# @!attribute [rw] instance_access_control_attribute_configuration
|
878
|
-
# Gets the list of
|
879
|
-
#
|
876
|
+
# Gets the list of IAM Identity Center identity store attributes that
|
877
|
+
# have been added to your ABAC configuration.
|
880
878
|
# @return [Types::InstanceAccessControlAttributeConfiguration]
|
881
879
|
#
|
882
880
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceAccessControlAttributeConfigurationResponse AWS API Documentation
|
@@ -898,11 +896,11 @@ module Aws::SSOAdmin
|
|
898
896
|
# }
|
899
897
|
#
|
900
898
|
# @!attribute [rw] instance_arn
|
901
|
-
# The ARN of the
|
902
|
-
# executed. For more information about ARNs, see
|
903
|
-
# Names (ARNs) and
|
899
|
+
# The ARN of the IAM Identity Center instance under which the
|
900
|
+
# operation will be executed. For more information about ARNs, see
|
901
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
904
902
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
905
|
-
# *
|
903
|
+
# *AWS General Reference*.
|
906
904
|
# @return [String]
|
907
905
|
#
|
908
906
|
# @!attribute [rw] provision_permission_set_request_id
|
@@ -940,11 +938,11 @@ module Aws::SSOAdmin
|
|
940
938
|
# }
|
941
939
|
#
|
942
940
|
# @!attribute [rw] instance_arn
|
943
|
-
# The ARN of the
|
944
|
-
# executed. For more information about ARNs, see
|
945
|
-
# Names (ARNs) and
|
941
|
+
# The ARN of the IAM Identity Center instance under which the
|
942
|
+
# operation will be executed. For more information about ARNs, see
|
943
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
946
944
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
947
|
-
# *
|
945
|
+
# *AWS General Reference*.
|
948
946
|
# @return [String]
|
949
947
|
#
|
950
948
|
# @!attribute [rw] permission_set_arn
|
@@ -961,7 +959,7 @@ module Aws::SSOAdmin
|
|
961
959
|
end
|
962
960
|
|
963
961
|
# @!attribute [rw] permission_set
|
964
|
-
# Describes the level of access on an
|
962
|
+
# Describes the level of access on an AWS account.
|
965
963
|
# @return [Types::PermissionSet]
|
966
964
|
#
|
967
965
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribePermissionSetResponse AWS API Documentation
|
@@ -985,8 +983,8 @@ module Aws::SSOAdmin
|
|
985
983
|
# }
|
986
984
|
#
|
987
985
|
# @!attribute [rw] instance_arn
|
988
|
-
# The ARN of the
|
989
|
-
# executed.
|
986
|
+
# The ARN of the IAM Identity Center instance under which the
|
987
|
+
# operation will be executed.
|
990
988
|
# @return [String]
|
991
989
|
#
|
992
990
|
# @!attribute [rw] permission_set_arn
|
@@ -994,10 +992,9 @@ module Aws::SSOAdmin
|
|
994
992
|
# @return [String]
|
995
993
|
#
|
996
994
|
# @!attribute [rw] customer_managed_policy_reference
|
997
|
-
# Specifies the name and path of
|
998
|
-
#
|
999
|
-
#
|
1000
|
-
# set.
|
995
|
+
# Specifies the name and path of a customer managed policy. You must
|
996
|
+
# have an IAM policy that matches the name and path in each AWS
|
997
|
+
# account where you want to deploy your permission set.
|
1001
998
|
# @return [Types::CustomerManagedPolicyReference]
|
1002
999
|
#
|
1003
1000
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DetachCustomerManagedPolicyReferenceFromPermissionSetRequest AWS API Documentation
|
@@ -1024,11 +1021,11 @@ module Aws::SSOAdmin
|
|
1024
1021
|
# }
|
1025
1022
|
#
|
1026
1023
|
# @!attribute [rw] instance_arn
|
1027
|
-
# The ARN of the
|
1028
|
-
# executed. For more information about ARNs, see
|
1029
|
-
# Names (ARNs) and
|
1024
|
+
# The ARN of the IAM Identity Center instance under which the
|
1025
|
+
# operation will be executed. For more information about ARNs, see
|
1026
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1030
1027
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1031
|
-
# *
|
1028
|
+
# *AWS General Reference*.
|
1032
1029
|
# @return [String]
|
1033
1030
|
#
|
1034
1031
|
# @!attribute [rw] permission_set_arn
|
@@ -1037,8 +1034,7 @@ module Aws::SSOAdmin
|
|
1037
1034
|
# @return [String]
|
1038
1035
|
#
|
1039
1036
|
# @!attribute [rw] managed_policy_arn
|
1040
|
-
# The
|
1041
|
-
# permission set.
|
1037
|
+
# The AWS managed policy ARN to be detached from a permission set.
|
1042
1038
|
# @return [String]
|
1043
1039
|
#
|
1044
1040
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DetachManagedPolicyFromPermissionSetRequest AWS API Documentation
|
@@ -1064,11 +1060,11 @@ module Aws::SSOAdmin
|
|
1064
1060
|
# }
|
1065
1061
|
#
|
1066
1062
|
# @!attribute [rw] instance_arn
|
1067
|
-
# The ARN of the
|
1068
|
-
# executed. For more information about ARNs, see
|
1069
|
-
# Names (ARNs) and
|
1063
|
+
# The ARN of the IAM Identity Center instance under which the
|
1064
|
+
# operation will be executed. For more information about ARNs, see
|
1065
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1070
1066
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1071
|
-
# *
|
1067
|
+
# *AWS General Reference*.
|
1072
1068
|
# @return [String]
|
1073
1069
|
#
|
1074
1070
|
# @!attribute [rw] permission_set_arn
|
@@ -1085,7 +1081,7 @@ module Aws::SSOAdmin
|
|
1085
1081
|
end
|
1086
1082
|
|
1087
1083
|
# @!attribute [rw] inline_policy
|
1088
|
-
# The
|
1084
|
+
# The inline policy that is attached to the permission set.
|
1089
1085
|
# @return [String]
|
1090
1086
|
#
|
1091
1087
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/GetInlinePolicyForPermissionSetResponse AWS API Documentation
|
@@ -1105,8 +1101,8 @@ module Aws::SSOAdmin
|
|
1105
1101
|
# }
|
1106
1102
|
#
|
1107
1103
|
# @!attribute [rw] instance_arn
|
1108
|
-
# The ARN of the
|
1109
|
-
# executed.
|
1104
|
+
# The ARN of the IAM Identity Center instance under which the
|
1105
|
+
# operation will be executed.
|
1110
1106
|
# @return [String]
|
1111
1107
|
#
|
1112
1108
|
# @!attribute [rw] permission_set_arn
|
@@ -1153,7 +1149,7 @@ module Aws::SSOAdmin
|
|
1153
1149
|
#
|
1154
1150
|
# @!attribute [rw] access_control_attributes
|
1155
1151
|
# Lists the attributes that are configured for ABAC in the specified
|
1156
|
-
#
|
1152
|
+
# IAM Identity Center instance.
|
1157
1153
|
# @return [Array<Types::AccessControlAttribute>]
|
1158
1154
|
#
|
1159
1155
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/InstanceAccessControlAttributeConfiguration AWS API Documentation
|
@@ -1164,19 +1160,19 @@ module Aws::SSOAdmin
|
|
1164
1160
|
include Aws::Structure
|
1165
1161
|
end
|
1166
1162
|
|
1167
|
-
# Provides information about the
|
1163
|
+
# Provides information about the IAM Identity Center instance.
|
1168
1164
|
#
|
1169
1165
|
# @!attribute [rw] instance_arn
|
1170
|
-
# The ARN of the
|
1171
|
-
# executed. For more information about ARNs, see
|
1172
|
-
# Names (ARNs) and
|
1166
|
+
# The ARN of the IAM Identity Center instance under which the
|
1167
|
+
# operation will be executed. For more information about ARNs, see
|
1168
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1173
1169
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1174
|
-
# *
|
1170
|
+
# *AWS General Reference*.
|
1175
1171
|
# @return [String]
|
1176
1172
|
#
|
1177
1173
|
# @!attribute [rw] identity_store_id
|
1178
|
-
# The identifier of the identity store that is connected to the
|
1179
|
-
# instance.
|
1174
|
+
# The identifier of the identity store that is connected to the IAM
|
1175
|
+
# Identity Center instance.
|
1180
1176
|
# @return [String]
|
1181
1177
|
#
|
1182
1178
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/InstanceMetadata AWS API Documentation
|
@@ -1215,11 +1211,11 @@ module Aws::SSOAdmin
|
|
1215
1211
|
# }
|
1216
1212
|
#
|
1217
1213
|
# @!attribute [rw] instance_arn
|
1218
|
-
# The ARN of the
|
1219
|
-
# executed. For more information about ARNs, see
|
1220
|
-
# Names (ARNs) and
|
1214
|
+
# The ARN of the IAM Identity Center instance under which the
|
1215
|
+
# operation will be executed. For more information about ARNs, see
|
1216
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1221
1217
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1222
|
-
# *
|
1218
|
+
# *AWS General Reference*.
|
1223
1219
|
# @return [String]
|
1224
1220
|
#
|
1225
1221
|
# @!attribute [rw] max_results
|
@@ -1277,11 +1273,11 @@ module Aws::SSOAdmin
|
|
1277
1273
|
# }
|
1278
1274
|
#
|
1279
1275
|
# @!attribute [rw] instance_arn
|
1280
|
-
# The ARN of the
|
1281
|
-
# executed. For more information about ARNs, see
|
1282
|
-
# Names (ARNs) and
|
1276
|
+
# The ARN of the IAM Identity Center instance under which the
|
1277
|
+
# operation will be executed. For more information about ARNs, see
|
1278
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1283
1279
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1284
|
-
# *
|
1280
|
+
# *AWS General Reference*.
|
1285
1281
|
# @return [String]
|
1286
1282
|
#
|
1287
1283
|
# @!attribute [rw] max_results
|
@@ -1338,16 +1334,16 @@ module Aws::SSOAdmin
|
|
1338
1334
|
# }
|
1339
1335
|
#
|
1340
1336
|
# @!attribute [rw] instance_arn
|
1341
|
-
# The ARN of the
|
1342
|
-
# executed. For more information about ARNs, see
|
1343
|
-
# Names (ARNs) and
|
1337
|
+
# The ARN of the IAM Identity Center instance under which the
|
1338
|
+
# operation will be executed. For more information about ARNs, see
|
1339
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1344
1340
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1345
|
-
# *
|
1341
|
+
# *AWS General Reference*.
|
1346
1342
|
# @return [String]
|
1347
1343
|
#
|
1348
1344
|
# @!attribute [rw] account_id
|
1349
|
-
# The identifier of the
|
1350
|
-
#
|
1345
|
+
# The identifier of the AWS account from which to list the
|
1346
|
+
# assignments.
|
1351
1347
|
# @return [String]
|
1352
1348
|
#
|
1353
1349
|
# @!attribute [rw] permission_set_arn
|
@@ -1376,8 +1372,8 @@ module Aws::SSOAdmin
|
|
1376
1372
|
end
|
1377
1373
|
|
1378
1374
|
# @!attribute [rw] account_assignments
|
1379
|
-
# The list of assignments that match the input
|
1380
|
-
#
|
1375
|
+
# The list of assignments that match the input AWS account and
|
1376
|
+
# permission set.
|
1381
1377
|
# @return [Array<Types::AccountAssignment>]
|
1382
1378
|
#
|
1383
1379
|
# @!attribute [rw] next_token
|
@@ -1406,21 +1402,20 @@ module Aws::SSOAdmin
|
|
1406
1402
|
# }
|
1407
1403
|
#
|
1408
1404
|
# @!attribute [rw] instance_arn
|
1409
|
-
# The ARN of the
|
1410
|
-
# executed. For more information about ARNs, see
|
1411
|
-
# Names (ARNs) and
|
1405
|
+
# The ARN of the IAM Identity Center instance under which the
|
1406
|
+
# operation will be executed. For more information about ARNs, see
|
1407
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1412
1408
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1413
|
-
# *
|
1409
|
+
# *AWS General Reference*.
|
1414
1410
|
# @return [String]
|
1415
1411
|
#
|
1416
1412
|
# @!attribute [rw] permission_set_arn
|
1417
|
-
# The ARN of the PermissionSet from which the associated
|
1418
|
-
#
|
1413
|
+
# The ARN of the PermissionSet from which the associated AWS accounts
|
1414
|
+
# will be listed.
|
1419
1415
|
# @return [String]
|
1420
1416
|
#
|
1421
1417
|
# @!attribute [rw] provisioning_status
|
1422
|
-
# The permission set provisioning status for an
|
1423
|
-
# account.
|
1418
|
+
# The permission set provisioning status for an AWS account.
|
1424
1419
|
# @return [String]
|
1425
1420
|
#
|
1426
1421
|
# @!attribute [rw] max_results
|
@@ -1445,7 +1440,7 @@ module Aws::SSOAdmin
|
|
1445
1440
|
end
|
1446
1441
|
|
1447
1442
|
# @!attribute [rw] account_ids
|
1448
|
-
# The list of
|
1443
|
+
# The list of AWS `AccountIds`.
|
1449
1444
|
# @return [Array<String>]
|
1450
1445
|
#
|
1451
1446
|
# @!attribute [rw] next_token
|
@@ -1473,8 +1468,8 @@ module Aws::SSOAdmin
|
|
1473
1468
|
# }
|
1474
1469
|
#
|
1475
1470
|
# @!attribute [rw] instance_arn
|
1476
|
-
# The ARN of the
|
1477
|
-
# executed.
|
1471
|
+
# The ARN of the IAM Identity Center instance under which the
|
1472
|
+
# operation will be executed.
|
1478
1473
|
# @return [String]
|
1479
1474
|
#
|
1480
1475
|
# @!attribute [rw] permission_set_arn
|
@@ -1502,8 +1497,8 @@ module Aws::SSOAdmin
|
|
1502
1497
|
end
|
1503
1498
|
|
1504
1499
|
# @!attribute [rw] customer_managed_policy_references
|
1505
|
-
# Specifies the names and paths of the
|
1506
|
-
#
|
1500
|
+
# Specifies the names and paths of the customer managed policies that
|
1501
|
+
# you have attached to your permission set.
|
1507
1502
|
# @return [Array<Types::CustomerManagedPolicyReference>]
|
1508
1503
|
#
|
1509
1504
|
# @!attribute [rw] next_token
|
@@ -1547,7 +1542,8 @@ module Aws::SSOAdmin
|
|
1547
1542
|
end
|
1548
1543
|
|
1549
1544
|
# @!attribute [rw] instances
|
1550
|
-
# Lists the
|
1545
|
+
# Lists the IAM Identity Center instances that the caller has access
|
1546
|
+
# to.
|
1551
1547
|
# @return [Array<Types::InstanceMetadata>]
|
1552
1548
|
#
|
1553
1549
|
# @!attribute [rw] next_token
|
@@ -1575,11 +1571,11 @@ module Aws::SSOAdmin
|
|
1575
1571
|
# }
|
1576
1572
|
#
|
1577
1573
|
# @!attribute [rw] instance_arn
|
1578
|
-
# The ARN of the
|
1579
|
-
# executed. For more information about ARNs, see
|
1580
|
-
# Names (ARNs) and
|
1574
|
+
# The ARN of the IAM Identity Center instance under which the
|
1575
|
+
# operation will be executed. For more information about ARNs, see
|
1576
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1581
1577
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1582
|
-
# *
|
1578
|
+
# *AWS General Reference*.
|
1583
1579
|
# @return [String]
|
1584
1580
|
#
|
1585
1581
|
# @!attribute [rw] permission_set_arn
|
@@ -1607,7 +1603,7 @@ module Aws::SSOAdmin
|
|
1607
1603
|
end
|
1608
1604
|
|
1609
1605
|
# @!attribute [rw] attached_managed_policies
|
1610
|
-
#
|
1606
|
+
# An array of the AttachedManagedPolicy data type object.
|
1611
1607
|
# @return [Array<Types::AttachedManagedPolicy>]
|
1612
1608
|
#
|
1613
1609
|
# @!attribute [rw] next_token
|
@@ -1637,11 +1633,11 @@ module Aws::SSOAdmin
|
|
1637
1633
|
# }
|
1638
1634
|
#
|
1639
1635
|
# @!attribute [rw] instance_arn
|
1640
|
-
# The ARN of the
|
1641
|
-
# executed. For more information about ARNs, see
|
1642
|
-
# Names (ARNs) and
|
1636
|
+
# The ARN of the IAM Identity Center instance under which the
|
1637
|
+
# operation will be executed. For more information about ARNs, see
|
1638
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1643
1639
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1644
|
-
# *
|
1640
|
+
# *AWS General Reference*.
|
1645
1641
|
# @return [String]
|
1646
1642
|
#
|
1647
1643
|
# @!attribute [rw] max_results
|
@@ -1698,16 +1694,16 @@ module Aws::SSOAdmin
|
|
1698
1694
|
# }
|
1699
1695
|
#
|
1700
1696
|
# @!attribute [rw] instance_arn
|
1701
|
-
# The ARN of the
|
1702
|
-
# executed. For more information about ARNs, see
|
1703
|
-
# Names (ARNs) and
|
1697
|
+
# The ARN of the IAM Identity Center instance under which the
|
1698
|
+
# operation will be executed. For more information about ARNs, see
|
1699
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1704
1700
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1705
|
-
# *
|
1701
|
+
# *AWS General Reference*.
|
1706
1702
|
# @return [String]
|
1707
1703
|
#
|
1708
1704
|
# @!attribute [rw] account_id
|
1709
|
-
# The identifier of the
|
1710
|
-
#
|
1705
|
+
# The identifier of the AWS account from which to list the
|
1706
|
+
# assignments.
|
1711
1707
|
# @return [String]
|
1712
1708
|
#
|
1713
1709
|
# @!attribute [rw] provisioning_status
|
@@ -1741,7 +1737,7 @@ module Aws::SSOAdmin
|
|
1741
1737
|
# @return [String]
|
1742
1738
|
#
|
1743
1739
|
# @!attribute [rw] permission_sets
|
1744
|
-
# Defines the level of access that an
|
1740
|
+
# Defines the level of access that an AWS account has.
|
1745
1741
|
# @return [Array<String>]
|
1746
1742
|
#
|
1747
1743
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/ListPermissionSetsProvisionedToAccountResponse AWS API Documentation
|
@@ -1763,11 +1759,11 @@ module Aws::SSOAdmin
|
|
1763
1759
|
# }
|
1764
1760
|
#
|
1765
1761
|
# @!attribute [rw] instance_arn
|
1766
|
-
# The ARN of the
|
1767
|
-
# executed. For more information about ARNs, see
|
1768
|
-
# Names (ARNs) and
|
1762
|
+
# The ARN of the IAM Identity Center instance under which the
|
1763
|
+
# operation will be executed. For more information about ARNs, see
|
1764
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1769
1765
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1770
|
-
# *
|
1766
|
+
# *AWS General Reference*.
|
1771
1767
|
# @return [String]
|
1772
1768
|
#
|
1773
1769
|
# @!attribute [rw] next_token
|
@@ -1790,7 +1786,7 @@ module Aws::SSOAdmin
|
|
1790
1786
|
end
|
1791
1787
|
|
1792
1788
|
# @!attribute [rw] permission_sets
|
1793
|
-
# Defines the level of access on an
|
1789
|
+
# Defines the level of access on an AWS account.
|
1794
1790
|
# @return [Array<String>]
|
1795
1791
|
#
|
1796
1792
|
# @!attribute [rw] next_token
|
@@ -1817,11 +1813,11 @@ module Aws::SSOAdmin
|
|
1817
1813
|
# }
|
1818
1814
|
#
|
1819
1815
|
# @!attribute [rw] instance_arn
|
1820
|
-
# The ARN of the
|
1821
|
-
# executed. For more information about ARNs, see
|
1822
|
-
# Names (ARNs) and
|
1816
|
+
# The ARN of the IAM Identity Center instance under which the
|
1817
|
+
# operation will be executed. For more information about ARNs, see
|
1818
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1823
1819
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1824
|
-
# *
|
1820
|
+
# *AWS General Reference*.
|
1825
1821
|
# @return [String]
|
1826
1822
|
#
|
1827
1823
|
# @!attribute [rw] resource_arn
|
@@ -1890,9 +1886,9 @@ module Aws::SSOAdmin
|
|
1890
1886
|
#
|
1891
1887
|
# @!attribute [rw] permission_set_arn
|
1892
1888
|
# The ARN of the permission set. For more information about ARNs, see
|
1893
|
-
# [Amazon Resource Names (ARNs) and
|
1889
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
1894
1890
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1895
|
-
# *
|
1891
|
+
# *AWS General Reference*.
|
1896
1892
|
# @return [String]
|
1897
1893
|
#
|
1898
1894
|
# @!attribute [rw] description
|
@@ -1939,16 +1935,15 @@ module Aws::SSOAdmin
|
|
1939
1935
|
# @return [String]
|
1940
1936
|
#
|
1941
1937
|
# @!attribute [rw] account_id
|
1942
|
-
# The identifier of the
|
1943
|
-
#
|
1938
|
+
# The identifier of the AWS account from which to list the
|
1939
|
+
# assignments.
|
1944
1940
|
# @return [String]
|
1945
1941
|
#
|
1946
1942
|
# @!attribute [rw] permission_set_arn
|
1947
1943
|
# The ARN of the permission set that is being provisioned. For more
|
1948
|
-
# information about ARNs, see [Amazon Resource Names (ARNs) and
|
1949
|
-
#
|
1950
|
-
#
|
1951
|
-
# *Amazon Web Services General Reference*.
|
1944
|
+
# information about ARNs, see [Amazon Resource Names (ARNs) and AWS
|
1945
|
+
# Service Namespaces](/general/latest/gr/aws-arns-and-namespaces.html)
|
1946
|
+
# in the *AWS General Reference*.
|
1952
1947
|
# @return [String]
|
1953
1948
|
#
|
1954
1949
|
# @!attribute [rw] failure_reason
|
@@ -1998,21 +1993,19 @@ module Aws::SSOAdmin
|
|
1998
1993
|
include Aws::Structure
|
1999
1994
|
end
|
2000
1995
|
|
2001
|
-
# Specifies the configuration of the
|
2002
|
-
#
|
2003
|
-
#
|
2004
|
-
#
|
2005
|
-
#
|
2006
|
-
# permissions
|
2007
|
-
#
|
2008
|
-
#
|
2009
|
-
# User Guide*.
|
1996
|
+
# Specifies the configuration of the AWS managed or customer managed
|
1997
|
+
# policy that you want to set as a permissions boundary. Specify either
|
1998
|
+
# `CustomerManagedPolicyReference` to use the name and path of a
|
1999
|
+
# customer managed policy, or `ManagedPolicyArn` to use the ARN of an
|
2000
|
+
# AWS managed policy. A permissions boundary represents the maximum
|
2001
|
+
# permissions that any policy can grant your role. For more information,
|
2002
|
+
# see [Permissions boundaries for IAM entities][1] in the *IAM User
|
2003
|
+
# Guide*.
|
2010
2004
|
#
|
2011
|
-
# Policies used as permissions boundaries
|
2005
|
+
# Policies used as permissions boundaries don't provide permissions.
|
2012
2006
|
# You must also attach an IAM policy to the role. To learn how the
|
2013
2007
|
# effective permissions for a role are evaluated, see [IAM JSON policy
|
2014
|
-
# evaluation logic][2] in the *
|
2015
|
-
# Guide*.
|
2008
|
+
# evaluation logic][2] in the *IAM User Guide*.
|
2016
2009
|
#
|
2017
2010
|
#
|
2018
2011
|
#
|
@@ -2031,15 +2024,14 @@ module Aws::SSOAdmin
|
|
2031
2024
|
# }
|
2032
2025
|
#
|
2033
2026
|
# @!attribute [rw] customer_managed_policy_reference
|
2034
|
-
# Specifies the name and path of
|
2035
|
-
#
|
2036
|
-
#
|
2037
|
-
# set.
|
2027
|
+
# Specifies the name and path of a customer managed policy. You must
|
2028
|
+
# have an IAM policy that matches the name and path in each AWS
|
2029
|
+
# account where you want to deploy your permission set.
|
2038
2030
|
# @return [Types::CustomerManagedPolicyReference]
|
2039
2031
|
#
|
2040
2032
|
# @!attribute [rw] managed_policy_arn
|
2041
|
-
# The
|
2042
|
-
#
|
2033
|
+
# The AWS managed policy ARN that you want to attach to a permission
|
2034
|
+
# set as a permissions boundary.
|
2043
2035
|
# @return [String]
|
2044
2036
|
#
|
2045
2037
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/PermissionsBoundary AWS API Documentation
|
@@ -2062,11 +2054,11 @@ module Aws::SSOAdmin
|
|
2062
2054
|
# }
|
2063
2055
|
#
|
2064
2056
|
# @!attribute [rw] instance_arn
|
2065
|
-
# The ARN of the
|
2066
|
-
# executed. For more information about ARNs, see
|
2067
|
-
# Names (ARNs) and
|
2057
|
+
# The ARN of the IAM Identity Center instance under which the
|
2058
|
+
# operation will be executed. For more information about ARNs, see
|
2059
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
2068
2060
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2069
|
-
# *
|
2061
|
+
# *AWS General Reference*.
|
2070
2062
|
# @return [String]
|
2071
2063
|
#
|
2072
2064
|
# @!attribute [rw] permission_set_arn
|
@@ -2074,8 +2066,8 @@ module Aws::SSOAdmin
|
|
2074
2066
|
# @return [String]
|
2075
2067
|
#
|
2076
2068
|
# @!attribute [rw] target_id
|
2077
|
-
# TargetID is an
|
2078
|
-
#
|
2069
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit
|
2070
|
+
# string (For example, 123456789012).
|
2079
2071
|
# @return [String]
|
2080
2072
|
#
|
2081
2073
|
# @!attribute [rw] target_type
|
@@ -2115,11 +2107,11 @@ module Aws::SSOAdmin
|
|
2115
2107
|
# }
|
2116
2108
|
#
|
2117
2109
|
# @!attribute [rw] instance_arn
|
2118
|
-
# The ARN of the
|
2119
|
-
# executed. For more information about ARNs, see
|
2120
|
-
# Names (ARNs) and
|
2110
|
+
# The ARN of the IAM Identity Center instance under which the
|
2111
|
+
# operation will be executed. For more information about ARNs, see
|
2112
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
2121
2113
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2122
|
-
# *
|
2114
|
+
# *AWS General Reference*.
|
2123
2115
|
# @return [String]
|
2124
2116
|
#
|
2125
2117
|
# @!attribute [rw] permission_set_arn
|
@@ -2127,7 +2119,7 @@ module Aws::SSOAdmin
|
|
2127
2119
|
# @return [String]
|
2128
2120
|
#
|
2129
2121
|
# @!attribute [rw] inline_policy
|
2130
|
-
# The
|
2122
|
+
# The inline policy to attach to a PermissionSet.
|
2131
2123
|
# @return [String]
|
2132
2124
|
#
|
2133
2125
|
# @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/PutInlinePolicyToPermissionSetRequest AWS API Documentation
|
@@ -2160,8 +2152,8 @@ module Aws::SSOAdmin
|
|
2160
2152
|
# }
|
2161
2153
|
#
|
2162
2154
|
# @!attribute [rw] instance_arn
|
2163
|
-
# The ARN of the
|
2164
|
-
# executed.
|
2155
|
+
# The ARN of the IAM Identity Center instance under which the
|
2156
|
+
# operation will be executed.
|
2165
2157
|
# @return [String]
|
2166
2158
|
#
|
2167
2159
|
# @!attribute [rw] permission_set_arn
|
@@ -2216,8 +2208,7 @@ module Aws::SSOAdmin
|
|
2216
2208
|
|
2217
2209
|
# A set of key-value pairs that are used to manage the resource. Tags
|
2218
2210
|
# can only be applied to permission sets and cannot be applied to
|
2219
|
-
# corresponding roles that
|
2220
|
-
# Services accounts.
|
2211
|
+
# corresponding roles that IAM Identity Center creates in AWS accounts.
|
2221
2212
|
#
|
2222
2213
|
# @note When making an API call, you may pass Tag
|
2223
2214
|
# data as a hash:
|
@@ -2259,11 +2250,11 @@ module Aws::SSOAdmin
|
|
2259
2250
|
# }
|
2260
2251
|
#
|
2261
2252
|
# @!attribute [rw] instance_arn
|
2262
|
-
# The ARN of the
|
2263
|
-
# executed. For more information about ARNs, see
|
2264
|
-
# Names (ARNs) and
|
2253
|
+
# The ARN of the IAM Identity Center instance under which the
|
2254
|
+
# operation will be executed. For more information about ARNs, see
|
2255
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
2265
2256
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2266
|
-
# *
|
2257
|
+
# *AWS General Reference*.
|
2267
2258
|
# @return [String]
|
2268
2259
|
#
|
2269
2260
|
# @!attribute [rw] resource_arn
|
@@ -2312,11 +2303,11 @@ module Aws::SSOAdmin
|
|
2312
2303
|
# }
|
2313
2304
|
#
|
2314
2305
|
# @!attribute [rw] instance_arn
|
2315
|
-
# The ARN of the
|
2316
|
-
# executed. For more information about ARNs, see
|
2317
|
-
# Names (ARNs) and
|
2306
|
+
# The ARN of the IAM Identity Center instance under which the
|
2307
|
+
# operation will be executed. For more information about ARNs, see
|
2308
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
2318
2309
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2319
|
-
# *
|
2310
|
+
# *AWS General Reference*.
|
2320
2311
|
# @return [String]
|
2321
2312
|
#
|
2322
2313
|
# @!attribute [rw] resource_arn
|
@@ -2359,8 +2350,8 @@ module Aws::SSOAdmin
|
|
2359
2350
|
# }
|
2360
2351
|
#
|
2361
2352
|
# @!attribute [rw] instance_arn
|
2362
|
-
# The ARN of the
|
2363
|
-
# executed.
|
2353
|
+
# The ARN of the IAM Identity Center instance under which the
|
2354
|
+
# operation will be executed.
|
2364
2355
|
# @return [String]
|
2365
2356
|
#
|
2366
2357
|
# @!attribute [rw] instance_access_control_attribute_configuration
|
@@ -2392,11 +2383,11 @@ module Aws::SSOAdmin
|
|
2392
2383
|
# }
|
2393
2384
|
#
|
2394
2385
|
# @!attribute [rw] instance_arn
|
2395
|
-
# The ARN of the
|
2396
|
-
# executed. For more information about ARNs, see
|
2397
|
-
# Names (ARNs) and
|
2386
|
+
# The ARN of the IAM Identity Center instance under which the
|
2387
|
+
# operation will be executed. For more information about ARNs, see
|
2388
|
+
# [Amazon Resource Names (ARNs) and AWS Service
|
2398
2389
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2399
|
-
# *
|
2390
|
+
# *AWS General Reference*.
|
2400
2391
|
# @return [String]
|
2401
2392
|
#
|
2402
2393
|
# @!attribute [rw] permission_set_arn
|